Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

of

Open Source Firmware - oSC19 Slide 1 Open Source Firmware - oSC19 Slide 2 Open Source Firmware - oSC19 Slide 3 Open Source Firmware - oSC19 Slide 4 Open Source Firmware - oSC19 Slide 5 Open Source Firmware - oSC19 Slide 6 Open Source Firmware - oSC19 Slide 7 Open Source Firmware - oSC19 Slide 8 Open Source Firmware - oSC19 Slide 9 Open Source Firmware - oSC19 Slide 10 Open Source Firmware - oSC19 Slide 11 Open Source Firmware - oSC19 Slide 12 Open Source Firmware - oSC19 Slide 13 Open Source Firmware - oSC19 Slide 14 Open Source Firmware - oSC19 Slide 15 Open Source Firmware - oSC19 Slide 16 Open Source Firmware - oSC19 Slide 17 Open Source Firmware - oSC19 Slide 18 Open Source Firmware - oSC19 Slide 19 Open Source Firmware - oSC19 Slide 20 Open Source Firmware - oSC19 Slide 21 Open Source Firmware - oSC19 Slide 22 Open Source Firmware - oSC19 Slide 23 Open Source Firmware - oSC19 Slide 24 Open Source Firmware - oSC19 Slide 25 Open Source Firmware - oSC19 Slide 26 Open Source Firmware - oSC19 Slide 27 Open Source Firmware - oSC19 Slide 28 Open Source Firmware - oSC19 Slide 29 Open Source Firmware - oSC19 Slide 30 Open Source Firmware - oSC19 Slide 31 Open Source Firmware - oSC19 Slide 32 Open Source Firmware - oSC19 Slide 33 Open Source Firmware - oSC19 Slide 34 Open Source Firmware - oSC19 Slide 35 Open Source Firmware - oSC19 Slide 36
Upcoming SlideShare
What to Upload to SlideShare
Next
Download to read offline and view in fullscreen.

1 Like

Share

Download to read offline

Open Source Firmware - oSC19

Download to read offline

Presentation given at openSUSE Conference 2019 (recording: https://metaspora.org/open-source-firmware-oSC19.pdf)

Firmware is found in all computing devices, including PCs, laptops, networking equipment, printers, embedded devices such as IoT and industrial controllers, mobile phones, tablets, and more. The community around open source firmware has grown over the last years, allowing for more exchange in the development and granting freedom to end users. Prominent projects like U-Boot, Tianocore, coreboot and others teach how firmware works and welcome contributions. This talk provides a brief introduction into firmware, an overview of the general build process, a perception of the current state of development on two platforms, an end user report, and a summary of the first Open Source Firmware Conference, which was supported by the openSUSE project.

Related Books

Free with a 30 day trial from Scribd

See all

Related Audiobooks

Free with a 30 day trial from Scribd

See all

Open Source Firmware - oSC19

  1. 1. Open Source Firmware Daniel Maslowski
  2. 2. Introduction
  3. 3. Who I am Hi, I’m Daniel aka OrangeCMS aka CyReVolt! :) ▶ web developer ▶ security background ▶ hacking on many things ▶ just got started with firmware ▶ I like turtles
  4. 4. Thank you!
  5. 5. First Open Source Firmware Conference (OSFC) ▶ Erlangen, Germany ▶ ~200 participants ▶ 2 days of talks ▶ 2 tracks (main + security) ▶ 2 days of workshops ▶ openSUSE was among the sponsors
  6. 6. Firmware
  7. 7. Firmware is everywhere Embedded devices ▶ SoC Laptops ▶ BIOS/UEFI (host CPU) ▶ ME (coprocessor) ▶ GbE ▶ EC
  8. 8. Vendor Firmware fwupd/LVFS ▶ 114 vendors listed ▶ platform is growing and vendors push their updates
  9. 9. Issues ▶ continuous updates are a requirement ▶ firmware updates depend on vendors ▶ vendors do not typically ship updates too often ▶ quality, updates may brick devices https://blog.scaleway.com/2018/a-look-from-behind-the-open-source-bios/
  10. 10. Vendors
  11. 11. Supply Chain
  12. 12. Politics Warning: may contain traces of blobs ▶ a lot of code and necessary knowledge is kept proprietary ▶ documentation on ECs, Super I/O and other chips ▶ board schematics ▶ firmware for certain chips, FSP, VGA Option ROM, … ▶ proprietary vendors implement UEFI, which is inherently complex
  13. 13. Security Hardware attacks are increasing in research ▶ Rowhammer ▶ Spectre ▶ Meltdown Intel ME CVEs https://mjg59.dreamwidth.org/48429.html
  14. 14. Firmware, Kernel and the Rings on x86 ▶ -3: ME ▶ -2: SMM / UEFI kernel ▶ -1: hypervisor ▶ 0: kernel ▶ 3: userspace https://blog.jessfraz.com/post/why-open-source-firmware-is-important-for- security/
  15. 15. Open Source Firmware
  16. 16. U-Boot https://www.denx.de/wiki/U-Boot ▶ supports multiple architectures ▶ more than 1000 boards ▶ powers many embedded devices, such as SBCs and routers ▶ initializes hardware ▶ can directly boot a Linux kernel ▶ can run multiple other payloads
  17. 17. coreboot https://coreboot.org/ ▶ similar to U-Boot ▶ supports many boards and multiple architectures ▶ can directly boot a Linux kernel or run other payload ▶ ported to multiple older Thinkpads ▶ used for Chromebooks by Google ▶ now also applied to servers ▶ popular among hackers
  18. 18. LinuxBoot https://www.linuxboot.org/ ▶ announced in January 2018 ▶ remove overhead from bootloaders ▶ Linux provides device drivers and networking ▶ can be run from UEFI, U-Boot, or coreboot https://www.phoronix.com/scan.php?page=news_item&px=LinuxBoot-OSFC- 2018-State
  19. 19. Equipment
  20. 20. Screwdrivers
  21. 21. Magnifying Lens
  22. 22. Test Clip
  23. 23. Programmer
  24. 24. Tooling ▶ host toolchain ▶ project toolchain ▶ extra utilities for creating images etc ▶ flash utilities, e.g., flashrom
  25. 25. Start hacking
  26. 26. coreboot / QEMU Build your first image and run it in an emulator
  27. 27. Disassemble all the Devices!
  28. 28. XMG C404 (Gigabyte P34v2) coreboot port (WIP) Works ▶ RAM ▶ Video (blob only) ▶ keyboard and touchpad ▶ Bluetooth ▶ WiFi ▶ USB ▶ suspend / resume Needs work ▶ Embedded Controller (runs hot) ▶ ACPI (lid close doesn’t trigger S3) https://github.com/orangecms/coreboot/tree/gigabyte-p34v2 https://gist.github.com/orangecms/b6a8f036a30b7ac3b42c30c35fa295b4
  29. 29. Call for Action
  30. 30. Get OEMs on Board https://www.tuxedocomputers.com/ https://www.schenker-tech.de/ https://www.xmg.gg/
  31. 31. Integrate Firmware Upgrades in OS Distros ▶ zypper up firmware ▶ build firmware in OBS ▶ run checks on openQA ▶ bring kernel and firmware development closely together ▶ join the Open Source Firmware community
  32. 32. And now…
  33. 33. Happy Anniversaries! ▶ U-Boot and coreboot both turn 20 this year
  34. 34. Invitation Join OSFC 2019 in San Francisco! ▶ https://osfc.io/
  35. 35. Thanks again!
  36. 36. Invitation Number 2 Meet 9elements Cyber Security at it-sa! ▶ https://security.9elements.com/ ▶ https://www.it-sa.de
  • tuantm88

    Jun. 3, 2019

Presentation given at openSUSE Conference 2019 (recording: https://metaspora.org/open-source-firmware-oSC19.pdf) Firmware is found in all computing devices, including PCs, laptops, networking equipment, printers, embedded devices such as IoT and industrial controllers, mobile phones, tablets, and more. The community around open source firmware has grown over the last years, allowing for more exchange in the development and granting freedom to end users. Prominent projects like U-Boot, Tianocore, coreboot and others teach how firmware works and welcome contributions. This talk provides a brief introduction into firmware, an overview of the general build process, a perception of the current state of development on two platforms, an end user report, and a summary of the first Open Source Firmware Conference, which was supported by the openSUSE project.

Views

Total views

311

On Slideshare

0

From embeds

0

Number of embeds

33

Actions

Downloads

5

Shares

0

Comments

0

Likes

1

×